fix(deps): raised ansi regex version due to vulnerability

medikoo / cli-color

Colors and formatting for the console

ISC License

676 stars 34 forks source link

fix(deps): raised ansi regex version due to vulnerability #38

Closed jcabot21 closed 3 years ago

jcabot21 commented 3 years ago

Vulnerability was being alerted by dependabot. Updated in package json.

medikoo commented 3 years ago

@jcabot21 thanks for raising that. Still we cannot upgrade to ansi-regex@5 as it's incompatible with CJS modules format, and also it drops support for old Node.js versions, which cli-color@2 is obliged to support.

I believe best we can do, is to include ansi-regex functionality internally

jcabot21 commented 3 years ago

@medikoo Thanks for the quick feedback. I updated the pull request, bringing in functionality.